RE: LDAP SASL GSSAPI

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello 

As far as I know, there is no support for that, if you are using Apache you can delegate the authentication to it:

* Add the LDAP and Kerberos modules to Apache and configure them.
* Set an env variable so PHP can have access to the authenticated user.

Maybe this example can help you:
https://danieljamesscott.org/all-articles/10-articles/configuration-guides/9-apache-kerberos-and-ldap-integration.html


-----Original Message-----
From: michael@xxxxxxxxxxxxx <michael@xxxxxxxxxxxxx> 
Sent: jueves, 24 de octubre de 2019 07:55 a. m.
To: php-general@xxxxxxxxxxxxx
Subject: LDAP SASL GSSAPI

Hi!

I want to bind to ldap using a kerberos ticket.

Here is my code:

putenv( 'KRB5CCNAME=' . $_SERVER['KRB5CCNAME'] );
$ldapConnection = ldap_connect( 'ldap://dc.contoso.com' );
$bind = ldap_sasl_bind( $ldapConnection, NULL, NULL, 'GSSAPI' );
var_dump( error_get_last( ) );

I get a "ldap_sasl_bind(): Unable to bind to server: Not Supported" 
Error.

ldap_search using SASL on the Command Line (ldapsearch 
-Hldap://dc.constoso.com -bdc=dc,dc=contoso,dc=com samaccountname=user1) 
works fine.

Do you guys have any pointers on how to get that working?

Thanks, Mike




[Index of Archives]     [PHP Home]     [Apache Users]     [PHP on Windows]     [Kernel Newbies]     [PHP Install]     [PHP Classes]     [Pear]     [Postgresql]     [Postgresql PHP]     [PHP on Windows]     [PHP Database Programming]     [PHP SOAP]

  Powered by Linux